CVE-2015-8382

🗓️ 02 Dec 2015 01:00:00Reported by mitreType

The PCRE match function in version before 8.37 mishandles a crafted regular expression, leading to sensitive information leakage and denial of service attacks

Reporter	Title	Published	Views	Family All 53
IBM Security Bulletins	Security Bulletin:Multiple vulnerabilities in PCRE affect IBM Tivoli Network Manager IP Edition.	17 Jun 201815:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities Perl Compatible Regular Expression (PCRE) libraries - IBM Aspera Shares Application	10 Jul 201910:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Netezza SQL Extensions is vulnerable to an OpenSource PCRE Vulnerability (CVE-2015-8380, CVE-2015-8382, CVE-2015-8391)	18 Oct 201903:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities with the open source Perl Compatible Regular Expression (PCRE) libraries used in IBM Aspera Shares Application	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with the open source Perl Compatible Regular Expression (PCRE) library used in IBM Aspera Shares 1.9.2 and earlier	8 Dec 201804:55	–	ibm
CNVD	PCRE 'match' Function Information Disclosure Vulnerability	2 Dec 201500:00	–	cnvd
CVE	CVE-2015-8382	2 Dec 201501:00	–	cve
Debian CVE	CVE-2015-8382	2 Dec 201501:00	–	debiancve
Tenable Nessus	EulerOS 2.0 SP2 : php (EulerOS-SA-2019-2438)	4 Dec 201900:00	–	nessus
Tenable Nessus	F5 Networks BIG-IP : Multiple PCRE vulnerabilities (K20225390)	2 Aug 201600:00	–	nessus

Source	Link
openwall	www.openwall.com/lists/oss-security/2015/08/04/3
securityfocus	www.securityfocus.com/bid/76157
vcs	www.vcs.pcre.org/pcre/code/trunk/ChangeLog
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2015/11/29/1
git	www.git.php.net/
vcs	www.vcs.pcre.org/pcre/code/trunk/pcre_exec.c
bto	www.bto.bluecoat.com/security-advisory/sa128
bugs	www.bugs.exim.org/show_bug.cgi

23 Dec 2016 21:57Current

9High risk

Vulners AI Score9

EPSS0.01772